Version management method, device, equipment, storage medium and program product of power isolation device

Abstract

This application relates to a version management method, apparatus, computer device, computer-readable storage medium, and computer program product for a power isolation device. The method includes: generating a version file for the power isolation device using a trusted version generation environment, and performing an initial integrity check on the version file; the version file includes firmware and software files of the power isolation device; if the initial integrity check passes, digitally signing the version file to obtain signature information, and determining a trusted version package based on the signature information and the version file; distributing the trusted version package to the power isolation device using an inherently secure and trusted transmission channel, enabling the power isolation device to verify the trusted version package, and loading the trusted version package if the verification passes. This method can improve the security of version management for power isolation devices.

Description

Technical Field

[0001] This application relates to the field of power technology, and in particular to a version management method, apparatus, computer equipment, computer-readable storage medium, and computer program product for a power isolation device. Background Technology

[0002] Power isolation devices are used to isolate network areas with different security levels within a power system and block external malicious network attacks and unauthorized data exchanges. The firmware and software files of these devices require frequent version updates based on business needs and security requirements. The integrity and reliability of these version files directly affect the operational security of the power isolation devices, and consequently, the safe operation of the entire power system. Therefore, version management of power isolation devices is necessary.

[0003] In existing technologies, most power isolation devices are managed using a version update distribution model, which means that the version file is directly distributed to the power isolation device after it is generated, and verification is only performed during the version file loading stage.

[0004] However, existing version management methods for power isolation devices have poor security, which in turn affects the safe operation of the power system. Summary of the Invention

[0005] Therefore, it is necessary to provide a version management method, apparatus, computer equipment, computer-readable storage medium, and computer program product for power isolation devices that can improve security, in response to the above-mentioned technical problems.

[0006] Firstly, this application provides a version management method for a power isolation device, including:

[0007] A version file for the power isolation device is generated using a trusted version generation environment, and an initial integrity check is performed on the version file; the version file includes the firmware file and software file of the power isolation device.

[0008] If the initial integrity check passes, the version file is digitally signed to obtain signature information, and a trusted version package is determined based on the signature information and the version file.

[0009] By utilizing an inherently secure and trusted transmission channel, a trusted version package is distributed to a power isolation device, which then verifies the trusted version package and loads it if the verification is successful.

[0010] In one embodiment, generating a version file for the power isolation device using a trusted version generation environment includes: constructing an initial trusted version generation environment based on a trusted computing root, and generating a trusted version generation environment based on intrinsic security isolation technology and the initial trusted version generation environment; and generating a version file for the power isolation device in the trusted version generation environment based on the architectural requirements of the power isolation device.

[0011] In one embodiment, the initial integrity check of the version file includes: determining the hash value of the version file using a cryptographic hash algorithm, and comparing the hash value with a preset version integrity check benchmark value; if the comparison result indicates that the hash value and the version integrity check benchmark value are the same, then the initial integrity check is determined to be successful; if the comparison result indicates that the hash value and the version integrity check benchmark value are different, then the initial integrity check is determined to be unsuccessful, and the version file of the power isolation device is regenerated.

[0012] In one embodiment, digitally signing a version file to obtain signature information includes: generating key resources based on a preset algorithm using a trusted computing platform; and digitally signing the version file using the key resources to obtain signature information.

[0013] In one embodiment, a trusted version package is distributed to a power isolation device using an intrinsically secure and trusted transmission channel, including: establishing an intrinsically secure and trusted transmission channel using an encrypted transmission protocol and an identity authentication mechanism; and distributing the trusted version package to the power isolation device based on the intrinsically secure and trusted transmission channel and a trusted supply chain management mechanism.

[0014] In one embodiment, based on an intrinsically secure and trusted transmission channel, a trusted supply chain management mechanism is used to distribute a trusted version package to a power isolation device. This includes: obtaining trusted credentials for the distribution node using the trusted supply chain management mechanism, and performing identity verification and security status verification on the distribution node based on the trusted credentials; if the identity verification and security status verification are successful, the trusted version package is distributed to the power isolation device using the distribution node based on the intrinsically secure and trusted transmission channel.

[0015] Secondly, this application also provides a version management device for a power isolation device, comprising:

[0016] The generation module is used to generate version files for the power isolation device using a trusted version generation environment and to perform an initial integrity check on the version files; the version files include firmware files and software files for the power isolation device.

[0017] The determination module is used to digitally sign the version file after the initial integrity verification passes, to obtain signature information, and to determine a trusted version package based on the signature information and the version file.

[0018] The execution module is used to distribute the trusted version package to the power isolation device using an inherently secure and trusted transmission channel, so that the power isolation device can verify the trusted version package and load the trusted version package if the verification is successful.

[0019] Thirdly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the method described in any of the embodiments of the first aspect above.

[0020] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in any of the embodiments of the first aspect above.

[0021] Fifthly, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the method described in any of the embodiments of the first aspect above.

[0022] The aforementioned version management method, apparatus, computer equipment, computer-readable storage medium, and computer program product for power isolation devices first generate a version file for the power isolation device using a trusted version generation environment and perform an initial integrity check on the version file. The version file includes the firmware file and software file of the power isolation device. Then, if the initial integrity check passes, the version file is digitally signed to obtain signature information, and a trusted version package is determined based on the signature information and the version file. Finally, the trusted version package is distributed to the power isolation device using an inherently secure and trusted transmission channel, allowing the power isolation device to verify the trusted version package and, if the verification passes, load the trusted version package. The version management method for power isolation devices provided in this application incorporates security protection measures during both version file generation and distribution processes. Compared to the existing technology that only performs verification during loading, this effectively improves the security of version management for power isolation devices, thereby ensuring the safe and stable operation of the power isolation device and the power system. Attached Figure Description

[0023] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0024] Figure 1This is a flowchart illustrating a version management method for a power isolation device in one embodiment;

[0025] Figure 2 This is a flowchart illustrating a method for generating a version file of a power isolation device in one embodiment;

[0026] Figure 3 This is a flowchart illustrating a method for performing an initial integrity check on a version file in one embodiment;

[0027] Figure 4 This is a flowchart illustrating a method for obtaining signature information in one embodiment;

[0028] Figure 5 This is a flowchart illustrating a method for distributing a trusted version packet to a power isolation device in one embodiment.

[0029] Figure 6 This is a flowchart illustrating a method for distributing a trusted version package to a power isolation device in another embodiment;

[0030] Figure 7 This is a flowchart illustrating the version management method for a power isolation device in another embodiment;

[0031] Figure 8 This is a structural block diagram of a version management device for a power isolation device in one embodiment;

[0032] Figure 9 This is an internal structural diagram of a computer device in one embodiment;

[0033] Figure 10 This is a diagram of the internal structure of a computer device in another embodiment. Detailed Implementation

[0034] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0035] It should be noted that the terms "first," "second," etc., used in this application can be used to describe various elements, but these elements are not limited by these terms. These terms are only used to distinguish the first element from the second element. The terms "comprising" and "having," and any variations thereof, used in this application, are intended to cover non-exclusive inclusion. The term "multiple" used in this application refers to two or more. The term "and / or" used in this application refers to one of the embodiments, or any combination of multiple embodiments.

[0036] Power isolation devices are used to isolate network areas with different security levels within a power system and block external malicious network attacks and unauthorized data exchanges. The firmware and software files of these devices require frequent version updates based on business needs and security requirements. The integrity and reliability of these version files directly affect the operational security of the power isolation devices, and consequently, the safe operation of the entire power system. Therefore, version management of power isolation devices is necessary.

[0037] In existing technologies, most power isolation devices are managed using a version update distribution model, which means that the version file is directly distributed to the power isolation device after it is generated, and verification is only performed during the version file loading stage.

[0038] However, existing version management methods for power isolation devices have poor security, which in turn affects the safe operation of the power system.

[0039] In view of this, this application provides a version management method for power isolation devices. First, a version file for the power isolation device is generated using a trusted version generation environment, and an initial integrity check is performed on the version file. The version file includes the firmware and software files of the power isolation device. Then, if the initial integrity check passes, the version file is digitally signed to obtain signature information, and a trusted version package is determined based on the signature information and the version file. Finally, the trusted version package is distributed to the power isolation device using an inherently secure and trusted transmission channel, allowing the power isolation device to verify the trusted version package. If the verification passes, the trusted version package is loaded. The version management method for power isolation devices provided in this application incorporates security measures during both version file generation and distribution. Compared to the existing technology that only performs verification during loading, this effectively improves the security of version management for power isolation devices, thereby ensuring the safe and stable operation of the power isolation device and the power system.

[0040] The version management method for power isolation devices provided in this application can be implemented by a computer device, which can be a terminal or a server.

[0041] In one exemplary embodiment, such as Figure 1 As shown, a version management method for a power isolation device is provided, which includes the following steps:

[0042] Step 101: Generate a version file for the power isolation device using a trusted version generation environment, and perform an initial integrity check on the version file.

[0043] Optionally, the version file may include firmware and software files for the power isolation device. The firmware file is a program file that ensures the stable operation of the underlying hardware of the power isolation device. It may contain hardware drivers, low-level control logic, hardware adapter programs, etc., and is matched to the hardware model of the power isolation device. The software file is a program file that runs on the upper layer of the power isolation device. It may contain functional modules such as network isolation and management, blocking unauthorized data interaction, security protection, and equipment maintenance, and also carries a version number, compatible device model, update log, and integrity verification benchmark value.

[0044] In some exemplary embodiments, a computer device may utilize a trusted version generation environment to generate version files for a power isolation device.

[0045] Specifically, the computer equipment can first build a trusted version generation environment. After the trusted version generation environment is built, the computer equipment can use the trusted version generation environment to generate version files for the power isolation device.

[0046] Furthermore, after generating a version file for the power isolation device using a trusted version generation environment, the computer equipment can perform an initial integrity check on the version file.

[0047] Step 102: If the initial integrity verification passes, digitally sign the version file to obtain signature information, and determine the trusted version package based on the signature information and the version file.

[0048] Optionally, a digital signature refers to the operation of generating a unique digital identifier for a version file using cryptographic encryption and verification methods.

[0049] Signature information is electronic data generated during the digital signature process. It can be used to verify the validity of the version file signature and has a corresponding relationship with the version file.

[0050] In some exemplary embodiments, after performing an initial integrity check on the version file, if the initial integrity check passes, the computer device can digitally sign the version file to obtain signature information.

[0051] Specifically, computer devices can obtain preset key resources and use these key resources to digitally sign version files in order to obtain signature information.

[0052] Furthermore, after obtaining the signature information, the computer device can determine the trusted version package based on the signature information and the version file.

[0053] Specifically, computer devices can associate and bind signature information with version files to form an inseparable whole data packet, which is a trusted version packet.

[0054] Step 103: Using an intrinsically secure and trusted transmission channel, distribute the trusted version package to the power isolation device so that the power isolation device can verify the trusted version package and load it if the verification is successful.

[0055] In some exemplary embodiments, after obtaining a trusted version package, a computer device can use an inherently secure and trusted transmission channel to distribute the trusted version package to a power isolation device.

[0056] Specifically, computer equipment can first build an inherently secure and trusted transmission channel, and then use the inherently secure and trusted transmission channel to distribute the trusted version package to the power isolation device.

[0057] Furthermore, after receiving the trusted version packet, the power isolation device can verify the trusted version packet and load it if the verification is successful.

[0058] Specifically, after receiving a trusted version package, the power isolation device can, based on its built-in trusted cryptographic module and in a trusted execution environment, first verify the validity of the signature information to confirm the trustworthiness of the version source, and then verify the integrity of the version file and its compatibility with the current power isolation device. If the verification of signature validity, file integrity, and device compatibility all pass, the trusted version package is loaded, completing the version update of the power isolation device. If any verification step fails, the trusted version package can be rejected directly, triggering local audible and visual alarms and remote reporting alarms. The alarm information includes the verification failure type, version identifier, device identifier, and the time of the anomaly. At the same time, the anomaly information is reported to the trusted supply chain control mechanism and the operation and maintenance management node. The operation and maintenance management node can issue version rollback or redistribution instructions based on the anomaly information.

[0059] The aforementioned version management method for power isolation devices first generates a version file for the power isolation device using a trusted version generation environment and performs an initial integrity check on the version file. The version file includes the firmware and software files of the power isolation device. Then, if the initial integrity check passes, the version file is digitally signed to obtain signature information, and a trusted version package is determined based on the signature information and the version file. Finally, the trusted version package is distributed to the power isolation device using an inherently secure and trusted transmission channel, allowing the power isolation device to verify the trusted version package. If the verification passes, the trusted version package is loaded. The version management method for power isolation devices provided in this application incorporates security protection measures during both version file generation and distribution. Compared to the existing technology that only performs verification during loading, this effectively improves the security of version management for power isolation devices, thereby ensuring the safe and stable operation of the power isolation device and the power system.

[0060] In one exemplary embodiment, such as Figure 2 As shown, generating a version file for a power isolation device using a trusted version generation environment includes the following steps:

[0061] Step 201: Construct an initial trusted version generation environment based on the trusted computing root, and generate a trusted version generation environment based on intrinsic security isolation technology and the initial trusted version generation environment.

[0062] Optionally, the trusted computing root can be a root node with basic trusted functions such as cryptographic operations, key storage, and identity authentication.

[0063] In some exemplary embodiments, the computer device may first build an initial trusted version generation environment based on a trusted computing root.

[0064] Furthermore, after building an initial trusted version generation environment based on a trusted computing root, the computer device can generate a trusted version generation environment based on intrinsic security isolation technology and the initial trusted version generation environment.

[0065] Specifically, computer equipment can employ intrinsic security isolation technology to implement physical and logical dual isolation of the already constructed initial trusted version generation environment, thereby achieving effective isolation and preventing the penetration of external malicious attacks to obtain a trusted version generation environment.

[0066] Step 202: Based on the architectural requirements of the power isolation device, generate the version file of the power isolation device in a trusted version generation environment.

[0067] In some exemplary embodiments, after obtaining a trusted version generation environment, the computer device can generate a version file for the power isolation device in the trusted version generation environment based on the architectural requirements of the power isolation device.

[0068] Specifically, the computer equipment can generate firmware and software files adapted to the target power isolation device within a trusted version generation environment, based on the individual security architecture requirements of the power isolation device. The firmware and software files are then integrated to form a complete power isolation device version file, which includes a version number, the compatible device model, an update log, and an integrity verification benchmark value.

[0069] In one exemplary embodiment, such as Figure 3 As shown, the initial integrity check of the version file includes the following steps:

[0070] Step 301: Use a password hash algorithm to determine the hash value of the version file, and compare the hash value with the preset version integrity verification benchmark value.

[0071] Optionally, the cryptographic hash algorithm is a cryptographic algorithm that can convert input data of arbitrary length into a fixed-length hash value. For example, if the content of the version file is slightly altered, the hash value calculated by this algorithm will be completely different. In an alternative approach, the cryptographic hash algorithm can be the SHA-256 hash algorithm.

[0072] In some exemplary embodiments, a computer device may use a cryptographic hash algorithm to determine the hash value of a version file.

[0073] Specifically, the computer equipment uses a cryptographic hash algorithm to perform hash operations on the power isolation device version file generated in the trusted version generation environment, generating a fixed-length hash value that uniquely corresponds to the version file.

[0074] Furthermore, after determining the hash value of the version file, the computer device can compare the hash value with a preset version integrity verification benchmark value.

[0075] Step 302: If the comparison result indicates that the hash value and the version integrity verification baseline value are the same, then the initial integrity verification is confirmed to be successful.

[0076] In some exemplary embodiments, after comparing the hash value with a preset version integrity verification benchmark value, the computer device can obtain a comparison result. If the comparison result indicates that the hash value and the version integrity verification benchmark value are the same, it can be determined that the initial integrity verification has passed.

[0077] Step 303: If the comparison result indicates that the hash value and the version integrity verification benchmark value are different, then it is determined that the initial integrity verification failed, and the version file of the power isolation device is regenerated.

[0078] In some exemplary embodiments, after comparing the hash value with a preset version integrity verification benchmark value, the computer device can obtain a comparison result. If the comparison result indicates that the hash value and the version integrity verification benchmark value are different, it can be determined that the initial integrity verification failed and the version file of the power isolation device can be regenerated.

[0079] In one exemplary embodiment, such as Figure 4 As shown, digitally signing a version file to obtain signature information includes the following steps:

[0080] Step 401: Use a trusted computing platform to generate key resources based on a preset algorithm.

[0081] Optionally, the trusted computing platform can be a computing platform that integrates functions such as trusted cryptography modules, key management, secure storage, and cryptographic operations.

[0082] The preset algorithm can be a cryptographic encryption algorithm used to generate the key resources required for digital signatures. Alternatively, the preset algorithm can be an asymmetric encryption algorithm conforming to national cryptographic standards.

[0083] In some exemplary embodiments, the computer device may utilize a trusted computing platform to generate key resources based on a preset algorithm.

[0084] Specifically, computer devices can invoke the cryptographic operations and key management functions of the trusted computing platform to generate key resources for digital signatures of version files within the encrypted secure storage area of ​​the trusted computing platform, based on preset cryptographic encryption algorithms. These key resources may include a signing key required for the signing operation and a corresponding verification key required for subsequent verification. The generated key resources will be securely stored throughout the entire process within the encrypted storage area of ​​the trusted computing platform.

[0085] Step 402: Use the key resource to digitally sign the version file to obtain signature information.

[0086] In some exemplary embodiments, after generating a key resource, the computer device can use the key resource to digitally sign the version file to obtain signature information.

[0087] Specifically, the computer device can retrieve a dedicated signature key from the generated key resources and use the cryptographic operation function of the trusted computing platform to perform digital signature encryption operation on the version file. During the operation, the characteristic information of the version file is obtained synchronously, and signature information containing version identifier, signature timestamp, signature subject information and version hash digest is generated. The signature information is uniquely bound to the version file.

[0088] In one exemplary embodiment, such as Figure 5 As shown, the distribution of trusted version packets to power isolation devices using an intrinsically secure and trusted transmission channel includes the following steps:

[0089] Step 501: Build an inherently secure and reliable transmission channel using encrypted transmission protocols and identity authentication mechanisms.

[0090] Optionally, an encrypted transport protocol refers to a network protocol that performs end-to-end encryption of data transmitted over the network using cryptographic encryption algorithms. For example, an encrypted transport protocol can prevent data from being illegally intercepted or tampered with during transmission. In one optional approach, the encrypted transport protocol may be this SSL / TLS 1.3 protocol.

[0091] An authentication mechanism can be a security control mechanism used to verify the legitimacy and authenticity of the identities of nodes participating in the transmission process. For example, an authentication mechanism can block unauthorized nodes from accessing the transmission process, preventing trusted version packets from being obtained or tampered with by unauthorized nodes. Alternatively, the authentication mechanism can be based on an X.509 digital certificate.

[0092] In some exemplary embodiments, computer devices can utilize encrypted transmission protocols and authentication mechanisms to build inherently secure and trusted transmission channels.

[0093] Specifically, computer equipment can integrate encrypted transmission protocols and identity authentication mechanisms to build an inherently secure and trusted transmission channel that combines encrypted data transmission with node identity verification capabilities. This inherently secure and trusted transmission channel can achieve end-to-end encryption of transmitted data and simultaneously verify the identity and trustworthiness of all nodes participating in the transmission of trusted version packets.

[0094] Step 502: Based on the inherently secure and trusted transmission channel, and utilizing the trusted supply chain management mechanism, distribute the trusted version package to the power isolation device.

[0095] In some exemplary embodiments, after establishing an intrinsically secure and trusted transmission channel, the computer device can distribute trusted version packages to the power isolation device based on the intrinsically secure and trusted transmission channel and utilize a trusted supply chain management mechanism.

[0096] In one exemplary embodiment, such as Figure 6 As shown, based on an inherently secure and trusted transmission channel and utilizing a trusted supply chain management mechanism, the trusted version package is distributed to the power isolation device, including the following steps:

[0097] Step 601: Obtain trusted credentials for distribution nodes using a trusted supply chain management mechanism, and verify the identity and security status of distribution nodes based on the trusted credentials.

[0098] Optionally, the trusted credential is a valid electronic certificate uniformly distributed by the trusted supply chain management mechanism to prove the legitimacy of the distribution node's identity and the security of its operation. For example, the trusted credential may include a unique identifier for the distribution node, security authentication information, credential validity period, node registration information, etc.

[0099] In some exemplary embodiments, computer devices can utilize trusted supply chain management mechanisms to obtain trusted credentials for distribution nodes.

[0100] Specifically, computer devices can send a request to the trusted supply chain management mechanism to obtain trusted credentials for distribution nodes. The trusted supply chain management mechanism then retrieves the trusted credentials of the corresponding distribution nodes that have been pre-registered and sends the trusted credentials to the computer devices.

[0101] Furthermore, after obtaining the trusted credentials of the distribution node, the computer device can perform identity verification and security status check on the distribution node based on the trusted credentials.

[0102] Specifically, the computer equipment compares the acquired trusted credentials of the distribution node with the preset trusted node verification standards to verify the uniqueness and legality of the node's identity, the validity of the credentials, and their tamper-proof status, thereby completing the trusted identity verification of the distribution node. At the same time, based on the node information associated with the trusted credentials, the real-time operational security status of the distribution node is detected to check whether the distribution node has been maliciously intruded, is running abnormally, or has had its permissions tampered with, thereby completing the security status verification of the distribution node.

[0103] Step 602: If the identity verification and security status verification are successful, the trusted version package is distributed to the power isolation device using the distribution node based on the intrinsically secure and trusted transmission channel.

[0104] In some exemplary embodiments, after the computer device performs identity verification and security status verification on the distribution node based on trusted credentials, if the identity verification and security status verification are successful, it can distribute the trusted version package to the power isolation device using the distribution node based on the inherently secure and trusted transmission channel.

[0105] Specifically, after performing end-to-end encryption on the trusted version packet, the computer equipment can transmit the encrypted trusted version packet to a verified distribution node via an inherently secure and trusted transmission channel. The distribution node then securely forwards the encrypted trusted version packet to the power isolation device. Optionally, the encryption algorithm used in this process can be the AES-256 encryption algorithm.

[0106] Furthermore, throughout the entire distribution process, information such as distribution nodes, distribution time, version identifier, and transmission nodes is recorded in real time to form a distribution log. This log is then synchronously uploaded to the trusted supply chain management mechanism to ensure that the version package distribution process is traceable and verifiable.

[0107] In one exemplary embodiment, such as Figure 7 As shown, another method for version management of power isolation devices is provided, which includes the following steps:

[0108] Step 701: Construct an initial trusted version generation environment based on the trusted computing root, and generate a trusted version generation environment based on intrinsic security isolation technology and the initial trusted version generation environment; based on the architectural requirements of the power isolation device, generate the version file of the power isolation device in the trusted version generation environment; the version file includes the firmware file and software file of the power isolation device;

[0109] Step 702: Determine the hash value of the version file using a password hash algorithm, and compare the hash value with the preset version integrity verification benchmark value; if the comparison result indicates that the hash value and the version integrity verification benchmark value are the same, then the initial integrity verification is determined to be successful; if the comparison result indicates that the hash value and the version integrity verification benchmark value are different, then the initial integrity verification is determined to be unsuccessful, and the version file of the power isolation device is regenerated.

[0110] Step 703: If the initial integrity verification passes, use the trusted computing platform to generate key resources based on a preset algorithm; use the key resources to digitally sign the version file to obtain signature information, and determine a trusted version package based on the signature information and the version file; and build an inherently secure and trusted transmission channel using encrypted transmission protocols and identity authentication mechanisms.

[0111] Step 704: Obtain trusted credentials for the distribution nodes using the trusted supply chain management mechanism, and perform identity verification and security status verification on the distribution nodes based on the trusted credentials; if the identity verification and security status verification are successful, distribute the trusted version package to the power isolation device using the distribution nodes based on the inherently secure and trusted transmission channel, so that the power isolation device can verify the trusted version package and load the trusted version package if the verification is successful.

[0112] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages in other steps. It is understood that the steps in different embodiments can be freely combined as needed, and all non-contradictory solutions formed by such combinations are within the scope of protection of this application.

[0113] Based on the same inventive concept, this application also provides a version management device for a power isolation device to implement the version management method for the power isolation device described above. The solution provided by this device is similar to the implementation described in the above method. Therefore, the specific limitations of one or more power isolation device version management device embodiments provided below can be found in the limitations of the power isolation device version management method described above, and will not be repeated here.

[0114] In one exemplary embodiment, such as Figure 8 As shown, a version management device 800 for a power isolation device is provided, comprising: a generation module 801, a determination module 802, and an execution module 803, wherein:

[0115] The generation module 801 is used to generate a version file of the power isolation device using a trusted version generation environment, and to perform an initial integrity check on the version file; the version file includes the firmware file and software file of the power isolation device;

[0116] The determination module 802 is used to digitally sign the version file after the initial integrity verification passes, to obtain signature information, and to determine a trusted version package based on the signature information and the version file;

[0117] The execution module 803 is used to distribute the trusted version package to the power isolation device using the inherently secure and trusted transmission channel, so that the power isolation device can verify the trusted version package and load the trusted version package if the verification is successful.

[0118] In one embodiment, the generation module 801 is specifically used to build an initial trusted version generation environment based on a trusted computing root, and to generate a trusted version generation environment based on intrinsic security isolation technology and the initial trusted version generation environment; based on the architectural requirements of the power isolation device, a version file of the power isolation device is generated in the trusted version generation environment.

[0119] In one embodiment, the generation module 801 is specifically used to determine the hash value of the version file using a password hash algorithm, and compare the hash value with a preset version integrity verification benchmark value; if the comparison result indicates that the hash value and the version integrity verification benchmark value are the same, then the initial integrity verification is determined to be successful; if the comparison result indicates that the hash value and the version integrity verification benchmark value are different, then the initial integrity verification is determined to be unsuccessful, and the version file of the power isolation device is regenerated.

[0120] In one embodiment, the determining module 802 is specifically used to generate key resources based on a preset algorithm using a trusted computing platform; and to digitally sign the version file using the key resources to obtain signature information.

[0121] In one embodiment, the execution module 803 is specifically used to establish an intrinsically secure and trusted transmission channel using an encrypted transmission protocol and an identity authentication mechanism; based on the intrinsically secure and trusted transmission channel, a trusted supply chain management mechanism is used to distribute the trusted version package to the power isolation device.

[0122] In one embodiment, the execution module 803 is specifically used to obtain the trusted credentials of the distribution node using the trusted supply chain management mechanism, and to perform identity verification and security status verification on the distribution node based on the trusted credentials; if the identity verification and security status verification are passed, the trusted version package is distributed to the power isolation device using the distribution node based on the inherently secure and trusted transmission channel.

[0123] Each module in the version management device of the aforementioned power isolation device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device in hardware form, or stored in the memory of a computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0124] In one exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 9 As shown, this computer device includes a processor, memory, input / output (I / O) interfaces, and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computing and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and a database. The internal memory provides the environment for the operation of the operating system and computer programs stored in the non-volatile storage media. The database stores data. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with external terminals via a network. When the computer program is executed by the processor, it implements a version management method for a power isolation device.

[0125] In one exemplary embodiment, a computer device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 10As shown, the computer device includes a processor, memory, input / output interface, communication interface, display unit, and input device. The processor, memory, and input / output interface are connected via a system bus, and the communication interface, display unit, and input device are also connected to the system bus via the input / output interface. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs in the non-volatile storage medium. The input / output interface is used for exchanging information between the processor and external devices. The communication interface is used for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, Near Field Communication (NFC), or other technologies. When the computer program is executed by the processor, it implements a version management method for a power isolation device.

[0126] Those skilled in the art will understand that Figure 9 and Figure 10 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0127] In one exemplary embodiment, a computer device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the method described in any of the above embodiments.

[0128] In one embodiment, a computer-readable storage medium is provided having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in any of the above embodiments.

[0129] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps of the method described in any of the above embodiments.

[0130] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0131] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0132] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A version management method for a power isolation device, characterized in that, The method includes: A version file for the power isolation device is generated using a trusted version generation environment, and an initial integrity check is performed on the version file; the version file includes the firmware file and software file of the power isolation device. If the initial integrity check passes, the version file is digitally signed to obtain signature information, and a trusted version package is determined based on the signature information and the version file. The trusted version package is distributed to the power isolation device using an intrinsically secure and trusted transmission channel, so that the power isolation device can verify the trusted version package and load the trusted version package if the verification is successful.

2. The method according to claim 1, characterized in that, The method of generating version files for power isolation devices using a trusted version generation environment includes: An initial trusted version generation environment is constructed based on a trusted computing root, and the trusted version generation environment is generated based on intrinsic security isolation technology and the initial trusted version generation environment. Based on the architectural requirements of the power isolation device, a version file for the power isolation device is generated in the trusted version generation environment.

3. The method according to claim 1, characterized in that, The initial integrity check of the version file includes: The hash value of the version file is determined using a password hash algorithm, and the hash value is compared with a preset version integrity verification benchmark value. If the comparison result indicates that the hash value and the version integrity verification benchmark value are the same, then the initial integrity verification is determined to be successful; If the comparison result indicates that the hash value and the version integrity verification benchmark value are different, then the initial integrity verification is determined to have failed, and the version file of the power isolation device is regenerated.

4. The method according to any one of claims 1 to 3, characterized in that, The step of digitally signing the version file to obtain signature information includes: Key resources are generated using a trusted computing platform based on a preset algorithm; The version file is digitally signed using the key resource to obtain signature information.

5. The method according to any one of claims 1 to 3, characterized in that, The method of distributing the trusted version packet to the power isolation device using an intrinsically secure and trusted transmission channel includes: The intrinsically secure and trusted transmission channel is established using encrypted transmission protocols and identity authentication mechanisms. Based on the inherently secure and trusted transmission channel, and utilizing a trusted supply chain management mechanism, the trusted version package is distributed to the power isolation device.

6. The method according to claim 5, characterized in that, The step of distributing the trusted version package to the power isolation device based on the inherently secure and trusted transmission channel and utilizing a trusted supply chain management mechanism includes: The trusted supply chain management mechanism is used to obtain trusted credentials for distribution nodes, and the trusted credentials are used to perform identity verification and security status verification on the distribution nodes. If the identity verification and security status verification are successful, the trusted version package is distributed to the power isolation device using the distribution node based on the intrinsically secure and trusted transmission channel.

7. A version management device for a power isolation device, characterized in that, The device includes: A generation module is used to generate a version file for the power isolation device using a trusted version generation environment, and to perform an initial integrity check on the version file; the version file includes the firmware file and software file of the power isolation device; The determination module is used to digitally sign the version file after the initial integrity verification passes, to obtain signature information, and to determine a trusted version package based on the signature information and the version file; An execution module is used to distribute the trusted version package to the power isolation device using an inherently secure and trusted transmission channel, so that the power isolation device can verify the trusted version package and load the trusted version package if the verification is successful.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.

Images